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DETAILED ACTION 
Response to Amendment 

1 . This action is in response to the amendment filed 2/17/2005. Claims 1-12 have 
been amended. The abstract has also been amended. 

Response to Arguments 

2. Applicant's arguments filed 2/1 7/2005 have been fully considered but they are 
not persuasive. Independent claims 1 , 5 and 9 have been amended such that the 
methods in the originally filed claims are now performed by an IC card. However, the 
added feature has already been addressed in the rejections of dependent claims 4, 8 
and 12 under 35 USC 103 in the previous Office action. 

In response to applicant's argument that that Blanchard (6,219,791) teaches 
detecting errors accidentally made during encryption/decryption, but not errors 
"internationally" generated by an IC card attacker (the word "internationally" is 
considered a typo error and is understood as "intentionally", see Specification p. 3, line 
25). It is noted that the feature is not recited in the rejected claims. Although the claims 
are interpreted in light of the specification, limitations from the specification are not read 
into the claims. See In re Van Geuns, 988 F.2d 1 181 , 26 USPQ2d 1057 (Fed. Cir. 
1993). 

Applicant argues that Boneh ("On the Importance of Checking Cryptographic 
Protocols for Faults") does not teach any tamper-resistant (defending/protecting) fault 
detection method for an IC card, and therefor, teaches a way from the invention (p. 10, 
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1 st paragraph). Boneh does teach that a smart card using RSA to generate signatures 
should check that the correct signature has indeed been produced to prevent attacks on 
the smart cards using induced hardware faults (p. 37, last par; p. 38, 4 th par). 

Applicant argues that Daniels (5,991,401) does not disclose controlling the output 
of the processing result Z and outputting it when it is correct (p. 10, last paragraph). 
Daniels teaches this feature in steps 43-45 of figure 3. 

Regarding the features relied upon and reasons for using the references 
Fernandez-Gomez ("Concurrent Error Detection in Block Ciphers"), Ogg (US 
2002/0178354 A1), and Schneier ("Applied Cryptography"), please refer to the 
corresponding rejections in the previous Office Action. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 1 and 4 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Blanchard et al. (6,219,791) in view of Boneh et al. ("On the Importance of Checking 
Cryptographic Protocols for Faults"). Blanchard discloses a method for verifying the 
result of a cryptographic operation using an information processing device comprising 
the steps of: performing a symmetric-key encryption process in which a secret key K is 
to be applied to an input plaintext M, and storing a processing result Z in a memory (fig. 
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4, step 420; fig. 1, elements 12, 20 and 30); performing a corresponding decryption 
process for said processing result Z on said memory and storing the decryption result W 
on the memory (fig. 4, step 430; fig. 1, element 30); outputting said processing result Z 
from said information processing device when said processing result W coincides with 
said plaintext M (fig. 4, step 470); and suppressing the output of said processing result 
Z from said information processing device when said processing result W does not 
coincide result when with said plaintext M (fig. 4, step 480). 

Blanchard does not disclose an IC card performing the method of claim 1 to 
verify a cryptographic process. Boneh discloses a smart card verifying the correctness 
a cryptographic computation to prevent attacks on the smart card using induced 
hardware faults (p. 37, last par; p. 38, 4 th par). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the Blanchard 
method such that it is implemented on a smart card, as taught by Boneh. A smart card 
needs to verify the correctness a cryptographic computation to prevent the danger that 
hardware faults poses to various cryptographic protocols. 

5. Claim 2 is rejected under 35 U.S.C. 103(a) as being unpatentable over Blanchard 
in view of Boneh as applied to claim 1 above, and further in view of Fernandez-Gomez 
et al. ("Concurrent Error Detection in Block Ciphers"). Blanchard discloses using a 
symmetric-key algorithm (fig. 1). Blanchard does not disclose using DES algorithm. 
Fernandez-Gomez discloses using DES algorithm (p. 980, right col., "The technique 
proposed ... in section 4"). It would have been obvious to one of ordinary skill in the art 
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at the time the invention was made to modify the combined method of Blanchard and 
Boneh to use DES algorithm, as taught by Fernandez-Gomez. The motivation for doing 
so would have been that DES is a current and widely used encryption algorithm. 

6. Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over Blanchard 
in view of Boneh as applied to claim 1 above, and further in view of Ogg et al. (US 
2002/0178354 A1). Blanchard does not disclose that the device is reset. Ogg discloses 
a cryptographic device being reset in response to an attack (par. 0042). It would have 
been obvious to one of ordinary skill in the art at the time the invention was made to 
modify the combined method of Blanchard and Boneh such that the device is reset in 
response to an attack, as taught by Ogg. The motivation for doing so would have been 
to protect against attempts to retrieve critical information. 

7. Claims 5-6 and 8 are rejected under 35 U.S.C. 1 03(a) as being unpatentable 
over Daniels et al. (5,991 ,401 ) in view of Fernandez-Gomez and Boneh. Daniels 
discloses a method for verifying the result of a cryptographic operation using an 
information processing device comprising the steps of: performing a decryption process 
wherein a master key is to be applied to an input ciphertext C, and storing a processing 
result Z in a memory (fig. 3, step 41 ); performing an encryption process for said 
processing result Z on said memory using an encryption key, and storing the result W 
on the memory (fig. 3, step 42); outputting said processing result Z from the information 
processing device when said processing result W coincides with said ciphertext C (fig. 
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3, step 44); and suppressing the output of said processing result Z from the information 
processing device when said processing result W does not coincide result when with 
said ciphertext C (fig. 3, step 45). 

Daniels does not disclose using a symmetric algorithm. Fernandez-Gomez 
discloses using DES, which is a symmetric algorithm (p. 980, right col., "The technique 
proposed ... in section 4"). It would have been obvious to one of ordinary skill in the art 
at the time the invention was made to modify the Daniels method to use DES algorithm, 
as taught by Fernandez-Gomez. The motivation for doing so would have been that 
DES is a current and widely used encryption algorithm. Accordingly, the same key is 
used in both encryption and decryption processes. 

Daniels does not disclose an IC card performing the method of claim 5 to verify a 
cryptographic process. Boneh discloses a smart card verifying the correctness a 
cryptographic computation to prevent attacks on the smart card using induced hardware 
faults (p. 37, last par; p. 38, 4 th par). It would have been obvious to one of ordinary skill 
in the art at the time the invention was made to modify the Daniels method further such 
that it is implemented on a smart card, as taught by Boneh. A smart card needs to 
verify the correctness a cryptographic computation to prevent the danger that hardware 
faults poses to various cryptographic protocols. 

8. Claim 7 is rejected under 35 U.S.C. 103(a) as being unpatentable over Daniels, 
Fernandez-Gomez and Boneh as applied to claim 5 above, and further in view of Ogg. 
Daniels does not disclose that the device is reset. Ogg discloses a cryptographic 
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device being reset in response to an attack (par. 0042). It would have been obvious to 
one of ordinary skill in the art at the time the invention was made to modify the 
combined method of Daniels, Fernandez-Gomez and Boneh such that the device is 
reset in response to an attack, as taught by Ogg. The motivation for doing so would 
have been to protect against attempts to retrieve critical information. 

9. Claims 9-10 and 12 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Daniels in view of Schneier ("Applied Cryptography") and Boneh. Daniels 
discloses a method for verifying the result of a cryptographic operation using an 
information processing device comprising the steps of: performing a decryption process 
wherein a master key is to be applied to an input ciphertext C, and storing a processing 
result Z in a memory (fig. 3, step 41); performing an encryption process for said 
processing result Z on said memory using an encryption key, and storing the result W 
on the memory (fig. 3, step 42); outputting said processing result Z from the information 
processing device when said processing result W coincides with said ciphertext C (fig. 
3, step 44); and suppressing the output of said processing result Z from the information 
processing device when said processing result W does not coincide result when with 
said ciphertext C (fig. 3, step 45). 

Daniels does not disclose using the RSA algorithm. Schneier discloses using 
RSA algorithm (Section 19.3, p. 466-467, "Soon after Merkle's knapsack ... confidence 
level in the algorithm"). It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to modify the Daniels method to use RSA algorithm, as 
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taught by Schneier. The motivation for doing so would have been that RSA is the 
easiest to understand and implement of all public-key algorithms. Accordingly, the 
same key is used in both encryption and decryption processes. 

Daniels does not disclose an IC card performing the method of claim 5 to verify a 
cryptographic process. Boneh discloses a smart card verifying the correctness a 
cryptographic computation to prevent attacks on the smart card using induced hardware 
faults (p. 37, last par; p. 38, 4 th par). It would have been obvious to one of ordinary skill 
in the art at the time the invention was made to modify the Daniels method further such 
that it is implemented on a smart card, as taught by Boneh. A smart card needs to 
verify the correctness a cryptographic computation to prevent the danger that hardware 
faults poses to various cryptographic protocols. 

10. Claim 1 1 is rejected under 35 U.S.C. 103(a) as being unpatentable over Daniels, 
Schneier and Boneh as applied to claim 9 above, and further in view of Ogg. Daniels 
does not disclose that the device is reset. Ogg discloses a cryptographic device being 
reset in response to an attack (par. 0042). It would have been obvious to one of 
ordinary skill in the art at the time the invention was made to modify the combined 
method of Daniels, Fernandez-Gomez and Boneh such that the device is reset in 
response to an attack, as taught by Ogg. The motivation for doing so would have been 
to protect against attempts to retrieve critical information. 
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Conclusion 

1 1 . THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Minh Dinh whose telephone number is 571-272-3802. 
The examiner can normally be reached on Mon-Fri: 10:00am-6:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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